[RADIATOR] Calling-Station-Id problem

[Heikki Vatiainen]

On 07/11/2011 05:53 PM, Fabio Ciampi wrote:

Hello Fabio

> I have in my radius.cfg file:
> 
> <AuthLog FILE>
> 
>     Identifier eduroam-isti-log
>     Filename %L/%Y%m%d-isti-auth.log
>    
>     LogSuccess 1
>     LogFailure 1
>     SuccessFormat %d/%m/%Y -- %H:%M:%S -- DOMAIN: %R :AUTHENTICATION  %r \
>         ssid = "eduroam"  %r \
>         user = "%n"  %r \
>         NAS = "%N"  %r  \
>         MAC-user = "%{Calling-Station-Id}" AP-wvlan =
> "%{Called-Station-Id}" %r
> 
>    FailureFormat %d/%m/%Y -- %H:%M:%S -- DOMAIN: %R :FAIL  %r \
>      user = "%n" password= ***  %r \
>      NAS = %N:"%{NAS-Identifier}" IP-user = "%{Framed-IP-Address}" %r \
>      MAC-user = "%{Calling-Station-Id}" AP-wvlan =
> "%{Called-Station-Id}" ssid = "%{ssid}" %r
> 
> </AuthLog>

> So I don't get in the isti-auth.log file the Calling-Station-Id
> attribute value.
> How can I solve this problem?

I tried your configuration with radpwtst. Here's what I did:

% ./radpwtst -trace 4 -noacct -password notfred
% ./radpwtst -trace 4 -noacct

The first request failed as it should, and the second was successful as
it should be.

The authlog looked like this:

12/07/2011 -- 15:46:49 -- DOMAIN:  :FAIL
 user = "mikem" password= ***
 NAS = 203.63.154.1:"203.63.154.1" IP-user = ""
 MAC-user = "987654321" AP-wvlan = "123456789" ssid = ""

12/07/2011 -- 15:46:52 -- DOMAIN:  :AUTHENTICATION
 ssid = "eduroam"
 user = "mikem"
 NAS = "203.63.154.1"
 MAC-user = "987654321" AP-wvlan = "123456789"

Attributes radpwtst sends are:
Attributes:
        User-Name = "mikem"
        Service-Type = Framed-User
        NAS-IP-Address = 203.63.154.1
        NAS-Identifier = "203.63.154.1"
        NAS-Port = 1234
        Called-Station-Id = "123456789"
        Calling-Station-Id = "987654321"
        NAS-Port-Type = Async
        User-Password =
bU<218><9><27><241><5><172><135>M<219><26><236><4>U<200>

Your configuration looks correct so you should check you are receiving
Calling-Station-Id and Called-Station-Id in the Access-Request messages.

You could also try testing with radpwtst.

Thanks!

-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.